Trail of Bits tested 25 popular package managers against a simulated malicious repository injecting code. Fewer than half verified lockfile hashes by default, and only Go and vcpkg verified every package. Only Go verified signatures by default.

A Flask cookie on developers.google.com was signed with a secret it carried inside itself. Pulling that secret out turned a forged session into code execution across Google's developer sites.

Thinkst's Agent Provocateur is a Canary personality that exploits agent suggestibility. It greets scanning agents, engages them helpfully, and probes for username, MAC address, and SSH host-key fingerprint, raising alerts. Internal tests reported agents tripping it 100% of the time.

Google's rewritten second edition of its SRE book marks ten years since the first. It covers SRE's evolution (SLOs, observability, automation, platforms), operating AI infrastructure, using AI for reliability work, and core cultural principles.

Analysis of 490 [un]prompted 2026 talk submissions: 71% concern agents, evals rose to 30%, prompt injection fell to 18%. Also, attacks increasingly target the agent harness.

Aidan Steele's notes on the newly launched AWS Lambda Web Functions, which cover SAM deployment quirks, concurrency and scaling behaviour, dual log groups, CloudFront OAC access, and the MicroVM execution environment, which has no extensions API and gets metadata via a one-time /load call.

Salesforce's two-track remediation model for AI-discovered vulnerabilities: a strategic track fixes shared architectural choke points, retiring findings in bulk; a tactical track closes validated multi-step exploit chains on adversary timelines.

GitHub's context-aware classifier pairs high-recall regex candidate generation with a fine-tuned ModernBERT model that filters placeholders, fixtures, and checksums. Versus the prior LLM pipeline: 11.5% higher owner-weighted acceptance, 86% lower median post-push scan time, over 98% lower serving cost.

A gh CLI extension that generates and verifies the GitHub Actions dependency lockfile, pinning every action your workflows use to an exact commit.

A privacy-first, local real-time network traffic visualizer showing each connection's destination, geolocation and responsible process.

Audit, review, and clean up your Claude Code standing permissions.

A tool for exploring SSH implementations. It scans for authentication attacks, pre-auth state transitions, auth timing analysis, and post-session enumeration. It is a Go project that is a work in progress.

AWS Lambda Web Functions is a serverless compute primitive that runs your HTTP framework natively, delivering fast, consistent responses through multi-concurrent execution and automated global distribution.

How to deploy a CI/CD gate using AWS Continuum that runs penetration tests scoped to each deployed change. It blocks production promotion when validated findings meet a severity threshold. Authentication uses OIDC rather than stored keys.